65 lines
1.7 KiB
Plaintext
65 lines
1.7 KiB
Plaintext
Goal: Add selinux support to cppw
|
|
|
|
Fix:
|
|
|
|
Status wrt upstream: cppw is not available upstream.
|
|
The patch was made based on the
|
|
302_vim_selinux_support patch. It needs to be
|
|
reviewed by an SE-Linux aware person.
|
|
|
|
Depends on 401_cppw_src.dpatch
|
|
|
|
Index: shadow-4.1.2/src/cppw.c
|
|
===================================================================
|
|
--- shadow-4.1.2.orig/src/cppw.c 2008-09-12 01:22:46.328002759 +0200
|
|
+++ shadow-4.1.2/src/cppw.c 2008-09-12 01:34:43.212006991 +0200
|
|
@@ -34,6 +34,9 @@
|
|
#include <sys/types.h>
|
|
#include <signal.h>
|
|
#include <utime.h>
|
|
+#ifdef WITH_SELINUX
|
|
+#include <selinux/selinux.h>
|
|
+#endif
|
|
#include "prototypes.h"
|
|
#include "pwio.h"
|
|
#include "shadowio.h"
|
|
@@ -114,6 +117,22 @@
|
|
filenewname = filenew;
|
|
|
|
if (access(file, F_OK)) cppwexit(file, 1, 1);
|
|
+#ifdef WITH_SELINUX
|
|
+ /* if SE Linux is enabled then set the context of all new files
|
|
+ to be the context of the file we are editing */
|
|
+ if (is_selinux_enabled ()) {
|
|
+ security_context_t passwd_context=NULL;
|
|
+ int ret = 0;
|
|
+ if (getfilecon (file, &passwd_context) < 0) {
|
|
+ cppwexit (_("Couldn't get file context"), errno, 1);
|
|
+ }
|
|
+ ret = setfscreatecon (passwd_context);
|
|
+ freecon (passwd_context);
|
|
+ if (0 != ret) {
|
|
+ cppwexit (_("setfscreatecon () failed"), errno, 1);
|
|
+ }
|
|
+ }
|
|
+#endif
|
|
if (!file_lock()) cppwexit("Couldn't lock file", errno, 5);
|
|
filelocked = 1;
|
|
|
|
@@ -134,6 +153,15 @@
|
|
cppwexit(0,0,1);
|
|
}
|
|
|
|
+#ifdef WITH_SELINUX
|
|
+ /* unset the fscreatecon */
|
|
+ if (is_selinux_enabled ()) {
|
|
+ if (setfscreatecon (NULL)) {
|
|
+ cppwexit (_("setfscreatecon() failed"), errno, 1);
|
|
+ }
|
|
+ }
|
|
+#endif
|
|
+
|
|
(*file_unlock)();
|
|
}
|
|
|